Code review of JDK-8072385, Only the first DNSName entry is checked for endpoint identification
Xuelei Fan
xuelei.fan at oracle.com
Fri Mar 6 02:20:35 UTC 2015
webrev: http://cr.openjdk.java.net/~xuelei/8072385/webrev.00/
On 3/4/2015 10:51 PM, Xuelei Fan wrote:
> Hi,
>
> Please review the fix for:
> https://bugs.openjdk.java.net/browse/JDK-8072385
>
> In SunJSSE implementation, during endpoint identification, there is a
> bug in SubjectAlternativeName matching that only the fist DNSName are
> checked. As may impact some business where host-name alias are used.
>
> The patch is attached.
>
> Thanks,
> Xuelei
>
More information about the security-dev
mailing list